Force Cache-Control private instead of removing cache headers